One response to “Yahoo Messenger Trojan “nsl-school””

*****************************************************************************
0. Search all IExporer.exe and Explorer.exe if it’s in temp directory Delete it and Restart your Computer
*****************************************************************************

*****************************************************************************
1. Copy the following code in a file and save as getregbk.inf
*****************************************************************************

2. Install the right click the getregbk.inf and selecting Install from popup
*****************************************************************************

*****************************************************************************
3. Copy the following code in a file and save as getregbk.reg
*****************************************************************************
REGEDIT4

4. Right click the getregbk.reg and selecting mearge from popup
*****************************************************************************

*****************************************************************************
5. Enable Run in start
****************************************************************************
Open command prompt type regedit to open registry editor.
Go to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Double-click NoRun on the right pane and change it to from 1 to 0.
To restore the Run command, reverse the steps by changing 0 to 1.

HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
Double-click Homepage on the right pane and change it to from 1 to 0.
Open any local stored .html or other web page or turn internet off and then open internet explorer
set the default page as blank or page of your choice